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AMENDMENTS TO THE CLAIMS 

Please amend the claims as follows. 

1. (Currently Amended) In a directory Gon^or, a A system oopablo of interacting with for 
filtering a plurality of entries organized in a tree structure of a directo ry server, e ach e ntry 
having attributes, tho attribut e s comprising real attribut e s each having a value stor e d in th e 
e ntr)^ the system comprising: 

a m e chanism capablo of asGociating a virtual attribute to an entr>^ subject to a virtual 
attribut e condition being v e rified, th e virtual attribut e condition being derived 
from data located ols o wh e ro in the tree structure; and 
a resolving function capabl e of configured to: 

receiving receive a first filter expression , wherein the first filter expression is 
based on a virtual attribute, wherein a value of the virtual at tribute is 
computed from a value of a first real attribute, and wherein the first real 
attribute is an attribute that supports indexing, and tho resolving function 

convert[[ing]] the first filter expression into one or mor e a second filter 
ftypressinn[[s]] . wherein the second filter expression comprising is based 
on the first real attribute[[s]]i and comput e d from th e first filter expression 
and from tho virtual attribute condition 
a real filter evaluation fimction configured to: 

receive the second filter expression, and 

obtain an entry selected from the plurality of entries organize d in the tree 
structure of the directory server, wherein the entry matches the second 
filter expression . 
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2. (Currently Amended) The system of Claim 1 , further comprising: 

an indexing table[[s]] , each indexing tablo relat e d to a real attribut e and comprising: 

an ordered list of attribute values , wherein an attribute value selected from the 
ordered list of attribute values comprises the value of the first real 
attribute, and 

a plurality of with corresponding entry identifiers associated with the ordered list 
of attribute values , th e ind e xing tabl e s b e ing extendabl e to thos e of th e 
real attribut e s which may be contained in th e on e or more s e cond filt e r 

o xpr e ssions 

wherein obtaining the entry comprises obtaining the entry identifier . 

3. (Cancelled) 

4. (Currently Amended) The system of Claim [[2]] 1, further comprising a filter e x e cution 
function comprising : 

a real filter e valuation function capable of rec e iving a r e al based filter expr e ssion bas e d 
on a real attribute, for d e t e rmining a corr e sponding s e t of entri e s; 

a virtual filter evaluation function capabl e of r e ceiving a virtual bas e d filter expression 
based on a virtual attribut e , for submitting the virtual based filt e r expression to 
the rosolving function as a first filter expr e ssion, and for subs e qu e ntly submitting 
resulting socond filter e xprossions to the real filter e valuation function; and 

a discriminator for determining wh e ther a filt e r expr e ssion is a real based one or a 
virtual based on e configured to: 
obtain the first filter expression. 

transmit the first filter expression to the resolving function, based on the fact that 
the first filter expression is based on the virtual attribute. 

obtain a third filter expression, wherein the third filter expression is based on a 
second real attribute, and 

transmit the third filter expression to the real filter evaluation function, based on 
the fact that the third filter expression is based on the second real attribute . 



145798 



3 



Application No.: 10/616,081 



Docket No.: 03226/501001; P7646 



5. (Currently Amended) The system of Claim [[4]] 1, further comprising: 

whoroin the real a„filter evaluation execution function is arranged configured to 
determine the s e t of entri e s from an ind e xing tabl e for the r e al attribut e , if 
available whether the entry matches the first filter expression, to obt ain a result in 
accordance with the first filter expression . 

6. (Currently Amended) The system of Claim [[4]] 5, further comprising: 

a filter manager responsiv e configured to: 

the r e c e ipt of obtain.^ request comprising [[a]] the first filter expression, 
the filter manag e r for call[[ing]] the filter execution function, using the first filter 
expression, and 

evaluating transmit the result in response to the reques t in the set of e ntri e s 
dotorminod by the filter execution function . 

7. (Currently Amended) The system of Claim [[6]] 1, further comprising: 

whoroin the filter manager has a filter-dividing function capable of splitting an input 
configured to divide the first filter expression into a plurality of elementary first 
filter expressions , wherein an elementary first filter expression selected from the 
plurality of elementary first filter expressions is based on the virtual attribute. 

8. (Currently Amended) The system of Claim 7, fijrther comprising: 

wherein the filter dividing function is operabl e to split a filter expression pres e nt e d as an 
input of the a filter execution function into ol e mentar>^ filt e r expressions for 
application to th e filter oxeoution function, and th e filter execution function is 
arranged configured to combine entries satisfying attribute condit ions defined by 
the plurality of elementary first filter expressions, the resp e ctive results in 
accordance with the combination of th e e lemontar>^ filter expr e ssions in the input 
first filter expression. 

9. (Currently Amended) The system of Claim 7, wherein the filter-dividing function is eperabte 
further configured to spHt divide the second filter expression[[s]] into a plurality of 
elementary second filter expressions , wherein an elementar y second filter expression 
selected from the plurality of elementary second filter expressions is based on the first real 
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attribute for application to th e real filt e r e valuation function, and th e filt e r exocution function 
is arranged to combine th e rospoctiv e results in accordanc e with the combination of th e 
s e cond elementary filter expr e ssions . 

10. (Currently Amended) The system of Claim 1, wherein the first filter expression comprises an 
operator int e rvening defining a relationship between a virtual attribute name and a virtual 
attribute value. 

1 1 . (Currently Amended) The system of Claim 1, wherein the virtual attribute is a rol e attribut e 
related to pluralitv of entries comprises a role entry in the tr ee structure and a user entry, and 
wherein the virtual attribute condition first filter expression comprises a role membership 
condition for the user entry, and wherein the r e solving function being operabl e for 
converting a first expression comprising the virtual rol e attribut e into a second filter 
expression bas e d on the role membership condition is associated with the ro le entry. 

12. (Currently Amended) The system of Claim 11, in which a wherein the first real attribute 
comprises a role identifier associated with the role entry , and wherein the user entry 
[[meets]] satisfies the role membership condition if it-has the user entry comprises a-real an 
attribute designating [[a]] the role identifier attach e d to the role e ntr>^ 

13. (Currently Amended) The system of Claim [[12]] JT, in which wherein the role entry 
contains comprises a plurality of roles, and wherein the resolving function is operabl e for 
repetitively r e ceiving a filt e r e xpression comprising the rol e attribute with a value identifying 
individual ones of such contain e d the user entry satisfies the role m embership condition if 
the user entry is a member of at least one of the plurality of roles. 

14. (Currently Amended) The system of Claim 11, in which a wherein the first real attribute 
comprises a role filter condition, and wherein the user entry [[meets]] satisfies the role 
membership condition if [[it]] the user entry meets a satisfies the role filter condition that is 
attached to the role e ntr>^ 

15. (Cancelled) 
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16. (Currently Amended) The system of Claim 11, in which wherein the role entry [[has]] is 
associated with a scope [[in]] of the tree structure, md wherein the virtual attribut e role 
membership condition comprises a scope condition. 

17. (Currently Amended) A method for of op e rating a director)^ Gorvor system that intoraots with 
filtering a plurality of entries organized in a tree structure of a directory server, each entry 
having attributes, the attributes comprising real attributes and virtual attribut e s, each real 
attribute having a value stor e d in th e entry and e ach virtual attribut e b e ing associat e d to an 
ontr>^ subj e ct to a virtual attribute condition being verified, th e virtual attribut e condition 
being d e rived from data located elsowhoro in the tree structure, the method comprising: 

receiving a first filter expression , wherein the first filter expression is based on a virtual 
attribute, wherein a value of the virtual attribute is computed from a value of a 
real attribute, and wherein the real attribute is an attribute that supports indexing : 
[[and]] 

if the first filter expression is based on a virtual attribute, converting the first filter 
expression into one or more a second filter expression[[s]], wherein the second 
filter expression comprising is based on the real attribute [[s]]ia«id 

obtaining an entry selected fi-om the plurality of entries organized in the tree structure of 
the directory server, wherein the entry matchesFFJ I the one or mor e second filter 
expression[[s]] being computed from the first filter e xpression and fi-om the 
virtual attribute condition . 

18. (Currently Amended) The method of Claim 17 , further comprising: 

constructinQ wherein obtaining the entry comprises obtaining an entry i d entifier selected 
from a plurality of entry identifiers stored in an indexing table[[s]], 

wherein the plurality of entry identifiers is associated with each r e lated to a r e al attribut e 
and having an ordered list of attribute values stored in the indexing table, and 

wherein an attribute value associated with the entry identifier comprises the value of the 
first real attribute with corr es ponding e ntr>^ identifiers, th e indexing tabl es b e ing 
oxtondablo to those of th e r e al attribut e s which may be contained in th e s e cond 
filter expressions . 
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19. (Currently Amended) The method of Claim [[18]] \7, further comprising: 

determining whether the entrv matches the first filter expression, to obtain a result in 
accordance with [[if]] the first filter expression is based on a r e al attribut e , 
dotormining a corr e sponding set of entri e s from an ind e xing tabl e for th e r e al 
attribut e. 

20. (Currently Amended) The method of Claim 17, fiirthor comprising: wherein converting the 
first filter expression to the second filter expression is performed based on d e t e rmining 
wheAeF the fact that t he first filter expression is based on [[a]] the virUial attribute or on a 
real attribut e. 

21. (Currently Amended) The method of Claim 17, further comprising: 

dividing the first filter expression into a plurality of elementary first filter expressions, 
wherein an elementary first filter expression selected from the plurality of 
elementary first filter expressions is based on the virtual attribute : and 
dotormining a first set of entries for the olomentar>^ first filt e r expr e ssions; and 
combining the first set of entt-ies satisfying attribute conditions defined bv the plurality of 
elementary first filter expressions, in accordance with according to the first filter 
expression. 

22. (Currently Amended) The method of Claim 17, further comprising: 

converting th e first filter expression into a second filter expr e ssion based on real 
attribut e s; 

dividing the second filter expression into a plurality of elementary second filter 
expressions , wherein an elementary second element filter selected f rom the 
plurality of elementary second filters is based on the real attribute : and 
dotormining a second s e t of entri e s for th e e l e montar>^ s e cond filter e xpressions; and 
combining tho second set of entries satisfying attribute conditions defi ned by the 
plurality of elementary second filter expressions, in accordance with according to 
the second filter expression. 
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23. (Currently Amended) The method of Claim 17, wherein the virtual attribute is a role attribut e 
relat e d to plurality of entries comprises a role entry in the tree structure and a user entry, 
wherein the virtual attribut e condition first filter expression comprises a role membership 
condition for the user entry, th e r e solving function being op e rable for conv e rting a first 
expression comprising th e virtual role attribut e into a second filt e r e xpr e ssion based on and 
wherein the role membership condition is associated with the role entry . 

24-29. (Cancelled) 

30. (New) The method of Claim 17, further comprising: 

determining whether the entry satisfies the virtual attribute condition to obtain a result in 
accordance with the first filter expression. 

31. (New) A computer-usable medium comprising program code embodied therein for filtering a 
plurality of entries organized in a tree structure of a directory server by: 

receiving a first filter expression, wherein the first filter expression is based on a virtual 
attribute, wherein a value of the virtual attribute is computed fi"om a value of a 
real attribute, and wherein the real attribute is an attribute that supports indexing; 

converting the first filter expression into a second filter expression, wherein the second 
filter expression is based on the real attribute; and 

obtaining an entry selected from the plurality of entries organized in the tree structure of 
the directory server, wherein the entry matches the second filter expression. 

32. (New) The computer-usable medium of Claim 31, wherein obtaining the entry comprises 
obtaining an entry identifier selected from a plurality of entry identifiers stored in an 
indexing table, wherein the plurality of entry identifiers is associated with an ordered list of 
attribute values stored in the indexing table, and wherein an attribute value associated with 
the entry identifier comprises the value of the first real attribute. 
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33. (New) The computer-usable medium of Claim 31, further comprising program code 
embodied therein for filtering the plurality of entries by: 

determining whether the entry matches the first filter expression to obtain a result in 
accordance with the first filter expression. 

34. (New) The computer-usable medium of Claim 31, wherein converting the first filter 
expression to the second filter expression is performed based on the fact that the first filter 
expression is based on the virtual attribute. 

35. (New) The computer-usable medium of Claim 31, further comprising program code 
embodied therein for filtering the plurality of entries by: 

dividing the first filter expression into a plurality of elementary first filter expressions, 
wherein an elementary first filter expression selected from the plurality of 
elementary first filter expressions is based on the virtual attribute; and 

combining entries satisfying attribute conditions defined by the plurality of elementary 
first filter expressions, in accordance with the first filter expression. 

36. (New) The computer-usable medium of Claim 31, further comprising program code 
embodied therein for filtering the plurality of entries by: 

dividing the second filter expression into a plurality of elementary second filter 
expressions, wherein an elementary second element filter selected from the 
plurality of elementary second filters is based on the real attribute; and 

combining entries satisfying attribute conditions defined by the plurality of elementary 
second filter expressions, in accordance with the second filter expression. 

37. (New) The computer-usable medium of Claim 31, wherein the plurality of entries comprises 
a role entry and a user entry, wherein the first filter expression comprises a role membership 
condition for the user entry, and wherein the role membership condition is associated with 
the role entry. 
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38. (New) The computer-usable medium of Claim 31, further comprising program code 
embodied therein for filtering the plurality of entries by: 

determining whether the entry satisfies the virtual attribute condition to obtain a result in 
accordance with the first filter expression. 
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